<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><div> log: <a rel="nofollow" target="_blank" href="http://tinypaste.com/5b99b">http://tinypaste.com/5b99b</a><br><br><br>I am wondering something: some more questions:<br><br><br>as i encounterd problem with included script for certificate files (bootstarp!! am i the one?), i created my own certificate... as I could! the fact is that running bootstrap, client certificate is on error cause it says that server certificate is not valid or not allowed to sign other certificate files...<br><br>i created and imported my own on XP for the test: the one DER format of the CA, and the other one p12 format with EKU(of the client). it means, only two!<br><br></div><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">so my question is, if the certificate (with server extension) is
missing on the client, could it interfer in EAP-PEAP authentication success?<br><br>thank you<br><br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Message d'origine ----<br>De : Reveal MAP <revealmapp@yahoo.fr><br>À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org><br>Envoyé le : Mardi, 22 Juillet 2008, 12h02mn 26s<br>Objet : Re : Re : Re : Re : Re : EAP-TLS OK - EAP-PEAP KO!! why that?<br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div>Hello Alan (and all the others too)<br><br>I am sory about the delay!<br>here is the entire log: <a rel="nofollow" target="_blank" href="http://tinypaste.com/5b99b">http://tinypaste.com/5b99b</a><br><br>EAP PEAP still don't work without giving an error message understandable by me! hope it will be clearer for you!<br><br>I precise:<br><br>NTLM_AUTH authenticate successfully against AD, same
with winbind. and EAP-TLS runs Ok<br><br>thank you<br></div><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><br><div style="font-family: arial,helvetica,sans-serif; font-size: 13px;">----- Message d'origine ----<br>De : Alan DeKok <aland@deployingradius.com><br>À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org><br>Envoyé le : Samedi, 19 Juillet 2008, 19h05mn
33s<br>Objet : Re: Re : Re : Re : Re : EAP-TLS OK - EAP-PEAP KO!! why that?<br><br>Reveal MAP wrote:<br>>> "f you want to authenticate PEAP users via SQL (which you seem<br>>> to be saying), then don't configure the mschap module to use ntlm_auth."<br>> <br>> my mistake: i didn't know...<br><br> Huh? You are aware that AD is not the same as SQL?<br><br>> back to Users based on AD.<br>>...<br>> in etc/raddb/module/mschap, i have this for ntlm_auth:<br>...<br><br> And then nothing for "radiusd -X".<br><br> If you can't follow repeated instructions, I think it's impossible for<br>me to help you.<br><br> Alan DeKok.<br>-<br>List info/subscribe/unsubscribe? See <a rel="nofollow" target="_blank" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a><br></div></div></div><br><hr size="1">
Envoyé avec <a rel="nofollow" target="_blank" href="http://us.rd.yahoo.com/mailuk/taglines/isp/control/*http://us.rd.yahoo.com/evt=52423/*http://fr.docs.yahoo.com/mail/overview/index.html">Yahoo! Mail</a>.<br>Une boite mail plus intelligente. </div></div></div><br>
<hr size="1">
Envoyé avec <a href="http://us.rd.yahoo.com/mailuk/taglines/isp/control/*http://us.rd.yahoo.com/evt=52423/*http://fr.docs.yahoo.com/mail/overview/index.html">Yahoo! Mail</a>.<br>Une boite mail plus intelligente. </a></body></html>